Privacy Policy

I give my consent for the

  • Company name: Barraquito Kft.
  • Located at: 1116 Budapest, Fehérvári út 168-178. V. em. 36. a.
  • Company registration number: 01-09-429561
  • E-mail: info@thaimassagethermal.hu
  • Phone: 06309394919
as the Data Controller, process, store, update and use the personal data provided by me during my booking, as well as the date of my current booking and my IP address, in order to.
- to keep me informed of the availability of the services it provides,
- to record the service and the time I have chosen in its booking system, so that it can be ready to provide the service at the time I have chosen and to identify me as the person who has booked the time in question, distinguishing me from other customers,
- to provide the Data Controller with all information relating to the selected service and time,
- if I should use the services of the Data Controller again in the future, to know when and which previous service I have used and to act accordingly.


This consent authorizes the data controller to process my personal data only in connection with the use of the online appointment system. I have read and accept the contents of the Privacy Policy of the Data Controller. I consent to the retention of my booking details in your booking system for a maximum of 3 calendar years from the date of my last booking.

I understand that I have the right to request the data controller to access, correct, delete, restrict the processing of my personal data and to object to the processing of such data. I have the right to withdraw my consent, but this does not affect the lawfulness of the processing carried out on the basis of the previous consent until the withdrawal. I have the opportunity to file a complaint with the National Data Protection and Freedom of Information Authority in case of violation of my rights.

I am aware that the provision of data is a prerequisite for using the service.

I acknowledge that the data controller uses the data processing assistance of Salonic International Zrt. (Headquarters: H-1137 Budapest, Szent István körút 24. 4. em. 3. ajtó, Company registration number: 01-10-142639, Representative and data protection contact person) . I have read and accept the contents of the Privacy Notice available on the website of Salonic International Zrt. (Https://www.salonic.hu).

Privacy Notice

The Salonic.hu service (hereinafter: the "Service") is an online cloud appointment system that can be embedded in a website.

The data management company providing the service is Salonic International Zrt. (Hereinafter: the "Service Provider"), which also qualifies as a data processor in relation to the user using the Service.
Company details:

Company name: Salonic International Zrt.

Office: 1036 Budapest, Bécsi út 52. 3.em. 1. (Doorbell: 5)

Telephone number: +36 30 40 6 88 77

Email: info@salonic.hu Tax number: 32452499-2-41 

Community tax number: HU32452499

 Company registration number: 19 09 519049 

Leading bank account: OTP Bank Bank account number: 11713036-21450864

 Data management contact: Dávid Bogdán email address: info@salonic.hu

phone number: +36 30 40 6 88 77 

Users of the Salonic.hu online login platform:

Visitors: Visitors to our site who do not wish to use our services as a User or Appointment will not register.
Users: a natural, directly or indirectly identifiable individual creates an appointment system instance through the registration of their representative, or has an employee or administrator account within an appointment system instance and uses the service to manage their appointments.

Appointments: Those who make an appointment for a given service within the framework of registration in the Users' system, and by registering on the user's website, their personal data will also appear in our company's data processing system.

The salonic.hu online appointment system collects and handles personal data from the users for the purpose and extent described in the following sections:

I. All our users (Visitor, Newsletter sign-up, User, Appointment)

 Our visitors place technical data about their own devices on www.salonic. web servers admin.

A.) Handling of cookies

1. The Service Provider's website and the Appointment System use cookies. Cookies are text files that are stored on your hard drive by your browser. Their content covers the web pages and ads you visit and search for. However, cookies do not contain any personal information such as name, address, e-mail address, etc. A cookie is used by a visitor to a page, for example, to gain access to information about a page.

2. No special settings are required for your browser to download cookies to your computer. By default, your browser will accept cookies and store them in a list (such as "Temporarily downloaded internet files") as it does not involve any risk factor. If you do not want the operator to use cookies, you will deactivate their reception in your web browser. See your browser's help for more information.

3. If you receive cookies, they will be stored on your computer, unless you delete them before. However, we warn you that failure to use cookies may result in limited functionality of our website.

4. We inform you that the use of this website may also include cookies (cookies) from 3rd parties, which facilitate the sharing of content on social networking sites, the production of traffic statistics or the support of our marketing activities.

List of 3rd party cookies used in connection with the Service Provider's website and the Appointment System:

Google Analytics

Facebook

Smartlook

Youtube

Salonic session cookie

5. You will also find links or icons of other websites on the Service Provider's website and within the Service - e.g. Facebook Like button, a link to a YouTube video - that points to that page. These websites also use cookies, the information about which can be found on the affected pages. Service Provider does not control third party websites and is not responsible for the content of other external websites.

6. If you still do not want to accept certain types of cookies, you can set your browser to not allow you to place a unique identifier, or your browser will warn you if the website wants to send a cookie. . Please read your internet browser's instructions or help screen to learn more about these features and to specify your cookie settings.

7. By using the Service, the User accepts that by restricting the operation of cookies, certain functions of the website may become inoperable.

B.) Our Data Processors
- Google Analytics

We use Google Analytics to collect technical information about visits to the Website and your use of the Service. Data collected by Analytics (e.g., device type, browser type, language settings, referring website address, browser device IP address, and other geographic data) is stored independently of anonymous personal data and provides statistical analysis to optimize system usability and marketing. .

Retention period: We store anonymous data collected by Google Analytics for up to 3 years.

- Smartlook

With the help of Smartlook, we can analyze the clicks on the user interface of the website and the system, the behavior of the visitors without storing the data they record. The purpose of this is to improve the user interface and make the use of the system easier and more understandable.

Retention period: Anonymous data collected by Smartlook will be retained for up to 1 year.

- Facebook

Our websites may also contain embedded plug-ins for the facebook.com social media network. The plug-in forwards to your service provider which of our websites you have opened. If you are logged in to your Facebook user account while browsing our website, the service provider will be able to compare the information you are interested in (i.e. the information you have accessed) with your user account. When using the features of the plug-ins (for example, clicking on the "Like" button, posting), the browser also passes this information directly to the service provider for storage.

For more information about the collection and use of data by Facebook and your rights and options regarding the above data management, please refer to your service provider's privacy statement: https://www.facebook.com/policy.php

If you want to avoid Facebook or Twitter links your visit to our website to your user account with these providers, you must log out of that user account before opening our websites.

II. Newsletter subscribers

A) Newsletter data management

- Legal basis: the consent of the data subject, which can be given by the natural person subscribing to the newsletter when registering on the website or blog or by checking the appropriate box.

- Purpose: to send regular or occasional newsletters about news, tips, professional content and marketing messages related to the Service

- Scope of data processed: name, email address

- Duration of data management: until the existence of the newsletter service or the withdrawal of the data subject's consent . The consent can be revoked using the link at the bottom of the newsletters or by sending an email to info@salonic.hu . 

III. Users

A.) Data management related to registration and creation of a reservation system

- Legal basis: The user or his / her natural person's representative consents to the data management by registering for the free trial period of the Service, filling in the registration form and checking the checkbox accepting this data management information.

- Its purpose: to create a new appointment system with the basic settings for the User, to identify the User, to get in touch (in order to find out the needs, to provide telephone or personal support and offers for the settings), to provide information about functions and services.

- Scope of data managed: full name, email address, password, telephone number, ID of the appointment system and data provided during the setup of the appointment system (eg opening hours, services, language settings, etc.)

- Duration of data management: if after the free trial period The user does not become a
subscriber and does not authorize the further storage and subsequent contact of his / her data, his / her data will be deleted no later than 30 days after the end of the trial period
. consent to data management.

- Purpose: to serve users as subscribers to the Service, to inform them, to contact them as a result of the contractual relationship, to inform them about new features and services; issuing an invoice in accordance with the law and fulfilling the obligation to keep accounting records.

- Scope of data processed: name, e-mail address, telephone number, resp. company name, registered office, address of the legal entity, telephone number, e-mail address, website address, customer ID, ID of the appointment system, and data provided during the setup of the appointment system (eg opening hours, services, language settings, etc.)

- Duration of data processing: up to 3 years after the existence of the active contractual relationship or the status of the representative of the natural person concerned. The issued invoices are issued by the Act. Pursuant to Section 169 (2), it must be kept for 8 years from the date of issue of the invoice. We would like to inform you that if you withdraw your consent to the issuance of the invoice, the Data Controller will inform Infotv. Pursuant to Section 6 (5) a), he is entitled to keep the personal data obtained during the issuance of the invoice for 8 years.

C.) data management (support) related to customer service activities

- Legal basis: User's express consent by filling in the registration form or subscription form.

- Purpose: proactive support of registered Users: offering help in setting up the system, surveying customer satisfaction, inquiring about individual needs and subscription intentions, bidding;
Receiving customer requests for incoming calls, Supporting users in using the system, handling complaints and other general contact functions data provided during subscription (see above).

- Duration of data management: see the chapters on data management related to Registration, creation of a booking system and data management related to Subscription.

D.) Telephone data management (support)

- Legal basis: The Service Provider may record telephone communications with its customer service for the purpose of providing sales, services, information and quality assurance. The legal basis for this data processing is the consent of the data subject. If the Service Provider wishes to record the sound recording, it shall inform the called party at the beginning of the call and request its consent.

- Purpose: the purpose of outgoing calls and related data management is to proactively support registered Users: to offer assistance in setting up the system, to assess customer satisfaction, to inquire about individual needs and subscription intentions; receiving customer requests for incoming calls, supporting users in using the system, complaint handling and other general contact functions

- Scope of data managed: name, telephone number, customer service records about the content of the conversation - without recording personal data, recording the conversation, ID of the relevant appointment system.

- Duration of data management: telephone conversations and related data are kept for a maximum of 3 years. Recorded audio can be retrieved by phone number and date of the conversation.

F.) Our data processors:

- laskázz.hu Our invoices

are issued, the data on the invoice is stored, and the payment status is monitored in the Számlázz.hu system.

Retention period: the issued invoices are issued in accordance with the Act. Pursuant to Section 169 (2), it must be kept for 8 years from the date of issue of the invoice. We would like to inform you that if you withdraw your consent to the issuance of the invoice, the Data Controller will inform Infotv. Pursuant to Section 6 (5) a), he is entitled to keep the personal data obtained during the issuance of the invoice for 8 years.


ARC. Appointments

A.) Management of data recorded in User Booking Systems

- Legal basis: natural person In addition to registering his / her personal data during registration on the Appointment User's website or by making an appointment without registration, the Service Provider qualifies as a data controller for this data (see see also point 8 of the General Terms and Conditions)

- Its purpose: to support the User with practical tasks related to the management of appointments, the reception of their customers and the provision of the service, eg: preparation for the provision of the service, identification of the customer appearing at the agreed times, information on possible changes, cancellations, Manage technical information (e.g., device type, operating system, language setting, display size, type) automatically from your browser

- Scope of data managed: full name, email address, telephone number, age, number of children, gender, name day, birthday, nationality, settlement (password in case of registration), ID of the appointment system, selected service provider, service chosen in connection with the reservation, chosen date, arrival time, name and ID of the calendar related to the service (which may refer to a location, employee or other thing specified by the User), any additional data specified by the User on the form to be filled in during the booking, IP address of the User collecting reservations, Manage technical information (such as device type, operating system, language setting, display size, type) automatically from your browser.

- Duration of data management: the data will be stored in the database of the reservation system for a maximum of 3 years after the last booked date connected to the User's customer.

B.) Our data processors

- Magyar Hosting

The Service Provider uses the data managed and stored by the reservation system on
the virtual servers (VPS) running in the Hungarian data center of Magyar Hosting Kft. (Registered office: H-1132 Budapest Victor Hugo u. 18-22.) stores.
Retention period: see the Management of Data Recorded in the Booking System block.

V. Data transfer The

Service Provider does not transfer the personal data of registrants, Users and Appointment Bookers to third parties.

VI. Data security

1. The Service Provider shall take all necessary security measures, organizational and technical measures in order to prevent the highest level of security of personal data and their unauthorized alteration, destruction and use.

2. The Service Provider takes all necessary measures to ensure data integrity, ie in order to ensure the accuracy and completeness of the personal data handled and / or processed by it.

3. The Service Provider shall protect the data with appropriate measures against unauthorized access, alteration, transmission, disclosure, deletion or destruction, as well as against accidental destruction, damage and inaccessibility due to changes in the applied technology.

4. The Service Provider makes every effort to preserve the authenticity and confidentiality of the processed data and to ensure that those concerned and those entitled to it always have access to them.

5. In order to fulfill the above obligations, the Service Provider reserves the right to inform its customers and partners about the vulnerability in its system if its customers or partners detect it, and at the same time to access the Service Provider's system and services until the vulnerability is eliminated, or it restricts some of its functions.

6. The detailed rules of the procedure to be followed in case of data protection incidents are contained in the Service Provider's internal security regulations.

VII. Rights affected by data processing

1. The data subject may - in writing - through the contact details of the Service Provider specified in point 1 - request the Service Provider to provide information on the handling of his / her personal data, request the correction of his / her personal data, request the deletion of his / her personal data. against the processing of your personal data. The data subject may withdraw his or her consent to the processing at any time, without prejudice to the lawfulness of the data processing carried out prior to the withdrawal.

2. At the request of the data subject, the Service Provider shall provide information on the data processed by the data subject, their source, purpose, legal basis, duration, name and address of any data processor and activities related to data processing. . The Service Provider shall provide the information in writing in a comprehensible form as soon as possible after the submission of the application, but not later than within 30 days. The information is free.

3. The Service Provider corrects the personal data if the personal data does not correspond to reality and the personal data corresponding to reality is available to the data controller.

4. The Service Provider shall immediately delete the personal data if its processing is illegal, the data subject requests it, the processed data is incomplete or incorrect - and this condition cannot be legally remedied - provided that the deletion is not excluded by law, the purpose of data processing is terminated, or the time limit for storing the data has expired, it has been ordered by a court or the National Data Protection and Freedom of Information Authority. The Service Provider is not responsible for the pages deleted by it, but previously archived with the help of Internet search engines, these can be removed by the search engine operator, the deletion must be initiated with it.

5. The Service Provider shall notify the data subject of the rectification, restriction of data management or deletion of the data. The Service Provider has 30 days to delete and correct personal data and to implement the restriction.

6. If the data subject considers that the Service Provider has been violated due to the data processing, he / she may file a complaint with the following authority:
National Data Protection and Freedom of Information Authority
1125 Budapest, Szilágyi Erzsébet fasor 22 / C.
Mailing address: 1530 Budapest, Post office box: 5.
Telephone: +36 -1-391-1400
Fax: + 36-1-391-1410
E-mail: ugyfelszolgalat@naih.hu 

VIII. DECLARATION

1. The Service Provider, as the Data Controller and Data Processor, acknowledges that the content of this data management information is mandatory.

2. Undertakes that the processing of data related to the Service and its operation complies at all times with the provisions set out in this document and in force legislation, in particular with regard to Regulation (EU) 2016/679 of the European Parliament and of the Council concerning the processing of personal data by natural persons and the free movement of such data (General Data Protection Regulation).

3. The Service Provider makes this information available on the website www.salonic.hu (hereinafter: the "Website"). Amendments to this Privacy Notice will be effective upon posting on this designated website.
Budapest, May 24, 2018